SOC Analyst

The candidate will be responsible for advanced incident investigation, threat analysis, root cause identification, and coordination with internal teams for remediation. The role requires strong analytical skills and hands-on experience with SIEM, EDR, AI and network security tools.

• Investigate and analyze escalated security alerts from L1 analysts
• Perform root cause analysis and incident validation
• Conduct threat hunting and identify Indicators of Compromise
• Analyze firewall, VPN, endpoint, cloud, AI and identity logs
• Handle phishing, malware, ransomware, and suspicious activity investigations
• Tune SIEM rules and reduce false positives
• Develop and update incident response playbooks
• Coordinate with IT teams for containment and remediation
• Prepare detailed incident reports and post-incident analysis
• Participate in shift rotation

• Hands-on experience with Monitoring and SIEM tools
• Strong knowledge of firewall technologies (Fortinet preferred)
• Experience with EDR/XDR/DLP tools (CrowdStrike)
• Understanding of TCP/IP, DNS, HTTP/S, SSL, VPN
• Experience in Azure AD / M365 security monitoring
• Familiarity with MITRE ATT&CK framework
• Basic scripting knowledge (PowerShell / Python preferred)

• Monitor Azure / AWS cloud security alerts
• Investigate risky sign-ins and identity-based attacks
• Knowledge of Conditional Access and MFA security policies

• Basic understanding of Generative AI and AI security risks
• Knowledge of AI data protection, access control, and security governance
• Understanding of prompt injection, sensitive data exposure, and AI tool security
• Ability to monitor and investigate AI-related security events and policy violations

• CEH
• SC-200 (Microsoft Security Operations)
• AZ-500 (Azure Security Engineer)

• Strong analytical and problem-solving skills
• Ability to handle high-severity incidents
• Good communication and documentation skills
• Team collaboration and mentoring ability